Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d558f8a0-fc74-3239-b033-8f889fe089fd.roa
File: d558f8a0-fc74-3239-b033-8f889fe089fd.roa (raw, json)
Hash identifier: WZM6Q4CvZG/2GIHg/wODi4MEKaM7GruBRxLbckdxyRc=
Subject key identifier: 18:BA:D8:5D:9C:AF:96:3D:0D:2E:7A:B7:8D:64:42:7E:4C:6C:52:DC
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D5519512D2AA4EA5253FEDD80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d558f8a0-fc74-3239-b033-8f889fe089fd.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 15 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 67.140.0.0/15 maxlen: 15
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:55:19:51:2d:2a:a4:ea:52:53:fe:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Mar 15 04:00:00 2028 GMT
Subject: CN=d8902e56-3eb9-4462-836d-ce5166a53b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4e:78:5d:dd:b7:4d:e2:93:a4:1f:29:5d:5c:
5f:dd:97:e1:1e:9b:19:8c:3a:08:2e:1b:bf:f7:23:
a0:b4:0e:92:75:69:8a:53:02:1c:73:75:4b:12:c1:
91:2f:ab:fd:b0:e7:ec:fc:8e:2b:c3:16:a4:15:a9:
4a:4d:54:cd:fd:b9:ba:5a:bf:38:b4:12:20:51:5f:
52:b7:1c:c4:2c:67:fd:1e:c7:2e:ac:59:16:c4:00:
2c:c0:d2:aa:6e:c0:6f:a9:83:c6:a2:98:2d:76:ad:
08:1a:14:27:b8:ff:7f:c2:e6:c3:c3:cb:57:b1:c3:
9d:64:a8:11:99:bf:7a:dc:f0:fc:03:93:c0:6e:5c:
4e:f8:9f:c1:dc:16:ec:8b:13:f2:8b:a6:35:bc:42:
f9:a3:4c:36:d7:69:b6:f3:ab:3f:be:53:50:0c:7d:
c5:07:9a:5d:c0:0d:15:87:e7:d5:09:36:41:6f:2c:
3f:c4:84:3b:12:c9:3f:2c:80:06:e9:71:a9:73:2a:
0f:3c:48:85:6c:68:7c:b7:ab:9f:1f:23:0d:4f:49:
7e:04:95:e6:82:f2:64:8e:58:32:3f:b9:68:57:89:
51:04:ec:29:b5:95:66:e1:27:62:85:51:27:c5:2c:
ee:6f:ca:b4:d6:9a:6e:62:92:8f:72:d9:21:0e:25:
33:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BA:D8:5D:9C:AF:96:3D:0D:2E:7A:B7:8D:64:42:7E:4C:6C:52:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d558f8a0-fc74-3239-b033-8f889fe089fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.140.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:34:75:33:59:0b:9e:ae:fa:6f:63:54:b7:5a:35:f3:53:26:
2f:8c:0c:59:1d:3d:26:6f:f5:ee:4c:19:fa:4a:a0:d3:6b:a5:
09:6f:c4:a3:cf:31:66:1a:62:87:a1:43:a1:3a:90:ec:63:98:
6b:04:f7:57:37:70:ed:fd:6e:1e:08:5e:6f:54:64:37:63:f6:
e5:eb:ef:f4:0b:d8:8b:8e:5d:9b:09:6c:ad:f9:3f:49:47:e1:
c8:03:71:f8:92:6d:84:2d:42:8f:93:ee:b8:c6:57:d9:14:0f:
24:e4:8d:df:f7:0c:09:1c:8d:f2:47:a5:52:8d:df:92:09:1f:
4b:d9:61:03:01:22:93:74:99:7c:3b:5f:61:db:d6:4d:69:46:
5b:e9:11:ca:f5:a7:49:36:ba:07:34:a3:55:f7:0d:3e:2d:be:
f0:8d:d5:83:6b:ef:16:f0:4f:05:fb:3a:95:9b:36:94:4a:65:
67:22:48:c9:d4:03:f7:e6:51:4f:63:a1:83:e0:ee:09:d5:a1:
0f:f5:d4:5b:a1:41:59:ed:8c:82:74:ab:ef:28:05:81:b1:2e:
db:fb:25:df:1c:6e:ba:94:92:75:6a:1b:81:25:e5:6e:ce:e7:
cf:29:b6:38:60:f8:f5:f1:d2:b4:eb:67:a8:37:36:b2:9e:10:
2c:ec:10:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:33 2024 by rpki-client on console-ams.rpki-client.org